I don't think you can safely eval the expression, .

The safest solution here is to write a parser for the expressions you want to accept and then either eval them or have the parser compute the result. This is not as hard as it sounds, you can have a look at Parse::RecDescent for example: the Parse::RecDescent Tutorial describes an expression parser that you could use as a basis. You could also use Parse::Yapp, the Perl Review has an article about it that should get you started.

And you can also write a rudimentary regexp-based parser, which would probably be a lot less powerful (and might be less safe).

Perl 6 will make this kind of parser a lot more easy to write BTW.

In reply to Re: securely evaluating an expression by mirod
in thread securely evaluating an expression by Len

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.